This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft File: xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft (raw, json) Hash identifier: UMAVaNwGKtbbReBAyXvyaHuNeQydN/Hb+jUj6zDGxBg= Subject key identifier: 82:3C:56:AF:49:1B:61:AE:29:36:BB:6B:10:97:4C:1D:04:73:E6:4B Authority key identifier: C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4 Certificate issuer: /CN=c613276cbca6793c33457a9bf22fc10b382301f4 Certificate serial: 019AF50A019FB851C2C0CFE677AD7030CD05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 19:01:04 +0000 Manifest this update: Sat 06 Dec 2025 19:01:04 +0000 Manifest next update: Sun 07 Dec 2025 19:01:04 +0000 Files and hashes: 1: b9YzzhOPHDVo_soINWMmjLB7fhk.roa (hash: lwz89foq6Y4dt/R5BV0uIhhLjFL2sOp+mEH46qLg0yk=) 2: xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl (hash: 1XbY1+dtnv1L5j55/FE3R3hFJj2FjHngTlRmKc0amSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:01:9f:b8:51:c2:c0:cf:e6:77:ad:70:30:cd:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c613276cbca6793c33457a9bf22fc10b382301f4 Validity Not Before: Dec 6 19:01:04 2025 GMT Not After : Dec 7 19:01:04 2025 GMT Subject: CN=823c56af491b61ae2936bb6b10974c1d0473e64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:78:a2:d3:a2:f2:3b:3e:5e:ff:72:61:fd:cf: d4:92:32:51:7f:5f:33:b4:e8:be:a8:eb:92:2d:8b: 15:f7:b7:ce:a1:c8:e2:29:b2:a3:24:4c:d2:cb:6c: 12:ef:21:e4:05:6d:34:69:a6:f7:00:75:16:54:aa: 40:42:d1:90:01:73:3c:63:2a:e5:d8:13:b5:b9:ce: ce:c6:20:20:e4:08:24:ea:e4:bf:c3:44:90:26:71: 3c:db:13:ee:00:7f:94:16:fc:82:4a:51:6b:a0:93: db:07:6a:ec:37:83:68:14:7f:0b:e6:52:8c:a1:95: 26:ec:c0:76:ed:f9:cf:28:93:5f:0b:34:1c:2c:14: ca:6a:17:85:10:b6:da:22:ea:cc:a0:7b:39:81:11: e9:e2:c9:7f:24:f2:12:b2:ed:e9:f0:d4:ca:91:44: b6:a2:63:6c:b9:4b:06:10:12:43:70:16:4b:95:03: 71:84:bf:3c:c2:53:14:31:f3:16:91:a7:23:b4:e8: dd:1d:7d:bb:ea:3a:26:41:ae:fe:2e:cf:41:72:96: b7:f2:5d:3d:f7:3d:57:f7:8f:70:17:56:de:0f:11: cf:f2:5a:a6:d1:a1:c9:83:0b:a9:ee:0a:11:fa:0b: 25:97:f1:36:b1:fa:97:47:9c:67:78:a9:7a:88:8e: f7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3C:56:AF:49:1B:61:AE:29:36:BB:6B:10:97:4C:1D:04:73:E6:4B X509v3 Authority Key Identifier: keyid:C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:48:11:b4:2c:78:1c:11:87:19:70:b2:02:bf:f8:4d:e2:0c: 48:84:a6:2d:af:ab:e1:55:dc:2b:c4:ec:f1:0a:50:42:a7:63: 19:96:4d:91:7d:fb:c1:a4:9f:ff:58:57:b5:6e:63:e0:87:2c: 35:f8:b2:c4:33:f8:28:ad:6e:63:0b:0c:fa:cb:96:97:93:c5: 6f:d5:23:c7:22:a2:b8:1e:1a:4e:8c:74:c4:cb:b7:c5:d6:09: 55:b0:04:12:3d:b0:94:d1:b3:8a:09:20:ae:a3:d5:bf:72:c9: c2:38:91:ec:7e:8b:f0:a7:70:15:f1:0a:22:4e:4f:a0:12:09: aa:1f:60:a6:d4:b1:aa:d4:27:65:74:05:a8:d7:63:06:6d:92: ba:1a:f1:83:ef:c6:f6:3e:f2:ca:46:f5:6a:83:ea:3d:56:66: ae:7e:c2:a0:7d:63:74:5b:16:97:8f:b2:61:c2:73:65:ef:6b: e0:d0:e8:45:d5:80:ab:13:ba:2b:62:1c:63:a3:6a:ff:2b:a3: cc:ff:d1:ce:08:89:3d:22:38:18:ec:35:07:76:57:84:fa:ff: 37:4d:de:aa:fc:9a:85:bd:1c:23:f5:39:7b:7d:b9:5d:85:fa: 4c:20:4c:58:e0:ef:d8:b2:94:85:68:f1:a0:ff:d2:5b:1a:5a: 78:b7:26:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CgGfuFHCwM/md61wMM0FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTMyNzZjYmNhNjc5M2MzMzQ1N2E5YmYyMmZjMTBiMzgy MzAxZjQwHhcNMjUxMjA2MTkwMTA0WhcNMjUxMjA3MTkwMTA0WjAzMTEwLwYDVQQD Eyg4MjNjNTZhZjQ5MWI2MWFlMjkzNmJiNmIxMDk3NGMxZDA0NzNlNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13ii06LyOz5e/3Jh/c/UkjJRf18z tOi+qOuSLYsV97fOocjiKbKjJEzSy2wS7yHkBW00aab3AHUWVKpAQtGQAXM8Yyrl 2BO1uc7OxiAg5Agk6uS/w0SQJnE82xPuAH+UFvyCSlFroJPbB2rsN4NoFH8L5lKM oZUm7MB27fnPKJNfCzQcLBTKaheFELbaIurMoHs5gRHp4sl/JPISsu3p8NTKkUS2 omNsuUsGEBJDcBZLlQNxhL88wlMUMfMWkacjtOjdHX276jomQa7+Ls9Bcpa38l09 9z1X949wF1beDxHP8lqm0aHJgwup7goR+gsll/E2sfqXR5xneKl6iI73sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFII8Vq9JG2GuKTa7axCXTB0Ec+ZLMB8GA1UdIwQY MBaAFMYTJ2y8pnk8M0V6m/IvwQs4IwH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhNbmJMeW1lVHd6UlhxYjhpX0JDemdqQWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yODE4YjYtMWMxMy00NzI0LWJlOTIt OGNkNDM4YjVmMjYwLzEveGhNbmJMeW1lVHd6UlhxYjhpX0JDemdqQWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8yODE4YjYtMWMxMy00NzI0LWJlOTItOGNkNDM4YjVmMjYw LzEveGhNbmJMeW1lVHd6UlhxYjhpX0JDemdqQWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvEgRtCx4 HBGHGXCyAr/4TeIMSISmLa+r4VXcK8Ts8QpQQqdjGZZNkX37waSf/1hXtW5j4Ics NfiyxDP4KK1uYwsM+suWl5PFb9UjxyKiuB4aTox0xMu3xdYJVbAEEj2wlNGzigkg rqPVv3LJwjiR7H6L8KdwFfEKIk5PoBIJqh9gptSxqtQnZXQFqNdjBm2Suhrxg+/G 9j7yykb1aoPqPVZmrn7CoH1jdFsWl4+yYcJzZe9r4NDoRdWAqxO6K2IcY6Nq/yuj zP/RzgiJPSI4GOw1B3ZXhPr/N03eqvyahb0cI/U5e325XYX6TCBMWODv2LKUhWjx oP/SWxpaeLcm5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:56 2025 by rpki-client